NSE4_FGT-7.0 Free Practice Test

- (Exam Topic 2)
Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

1. A. Root VDOM
2. B. FG-traffic VDOM
3. C. Customer VDOM
4. D. Global VDOM

Correct Answer: A

- (Exam Topic 2)
Refer to the exhibit, which contains a radius server configuration.

An administrator added a configuration for a new RADIUS server. While configuring, the administrator
selected the Include in every user group option.
What will be the impact of using Include in every user group option in a RADIUS configuration?

1. A. This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.
2. B. This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.
3. C. This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.
4. D. This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.

Correct Answer: A
Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/634373/authentication-servers

- (Exam Topic 2)
Refer to the exhibit.



The exhibit contains a network diagram, firewall policies, and a firewall address object configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-user2. Remote-user2 is still able to access Webserver.
Which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

1. A. Disable match-vip in the Deny policy.
2. B. Set the Destination address as Deny_IP in the Allow-access policy.
3. C. Enable match vip in the Deny policy.
4. D. Set the Destination address as Web_server in the Deny policy.

Correct Answer: CD

- (Exam Topic 2)
How do you format the FortiGate flash disk?

1. A. Load a debug FortiOS image.
2. B. Load the hardware test (HQIP) image.
3. C. Execute the CLI command execute formatlogdisk.
4. D. Select the format boot device option from the BIOS menu.

Correct Answer: D

- (Exam Topic 2)
Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How does FortiGate process the traffic sent to http://www.fortinet.com?

1. A. Traffic will be redirected to the transparent proxy and it will be allowed by proxy policy ID 3.
2. B. Traffic will not be redirected to the transparent proxy and it will be allowed by firewall policy ID 1.
3. C. Traffic will be redirected to the transparent proxy and It will be allowed by proxy policy ID 1.
4. D. Traffic will be redirected to the transparent proxy and it will be denied by the proxy implicit deny policy.

Correct Answer: D